$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: 3dGiMaENfgDvR4o7Y33V4WzJf+qYtNv4oFQ9TYeBbwU= Subject key identifier: 59:CC:4C:A7:02:8F:68:9C:48:71:92:70:36:39:A7:31:4D:F5:83:AE Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 2A60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2942 Signing time: Sun 20 Sep 2026 15:35:31 +0000 Manifest this update: Sun 20 Sep 2026 15:35:31 +0000 Manifest next update: Sun 27 Sep 2026 15:35:31 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: UlNX2QiRmaq3zRO/fEfTTfNZNxxufwugb9av8b874No=) 2: 258E51CC8C1311F18E34296D4511F970.roa (hash: nMT7/65TS89J7OqSIX55li4nvbblWq1EDna13tE8Ghw=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: sxDbznRMUEuDI6/LpS+5Ojyml9z10ADIy3GNXv2BLt8=) 4: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: DC/CiNTewEy9AjzNKO1rCpeeQC3b7v2RZLNf6CbyhHI=) 5: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: z422r+0bSl4JOQTLZbDePZuu5kvTrdyMBLvSzmsZIos=) 6: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b6hQv7rPPh2NoXSYCy1LQfz1KDKIPOQY1rtTl5hURj0=) 7: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: THnuk88BmBSAnI45lh48WjXHbq0OqH6ZzkCu47KlOw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10848 (0x2a60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Sep 20 15:35:31 2026 GMT Not After : Sep 27 15:35:31 2026 GMT Subject: CN=6aaffd43-bf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:81:0b:b1:51:66:93:67:b1:4c:db:2c:64: 8e:f7:98:6e:d4:bf:9d:9f:49:65:bd:ac:69:ec:b9: bc:b5:9d:da:0a:e6:b1:86:53:2c:e8:5f:89:d8:87: b3:97:f7:33:60:43:a6:18:f2:7c:9a:82:d1:c2:f2: 89:4d:46:b7:b6:d5:be:18:d5:70:e0:52:e2:13:f0: 54:0a:c4:ce:39:69:58:42:03:17:56:d9:62:21:37: 8d:44:c2:cf:8b:80:cc:6f:60:f3:ae:e2:73:9f:f6: d4:88:fb:27:80:63:40:62:af:57:e8:84:7b:fb:ee: d9:2b:67:6b:1f:12:96:da:19:5d:70:3c:12:69:96: 10:67:10:e6:aa:bd:99:1d:6d:3f:6f:7a:c8:d4:0a: 03:5d:0d:22:c8:6a:a8:db:24:b1:3f:3a:d7:6b:99: 9e:be:c1:70:02:28:a7:2a:3c:e1:dd:c7:78:10:63: a4:84:6d:54:70:ef:bf:bf:2e:b9:fd:8d:4d:38:6b: 68:74:1f:b0:21:b0:4a:e4:d7:73:b8:2e:56:57:36: c2:07:5e:4d:c1:e5:79:8d:b6:1a:98:cc:aa:f2:89: 68:ed:d6:f6:48:a5:68:88:92:34:b8:26:9e:77:a6: c8:10:68:3a:d5:71:50:9a:7f:7f:76:65:e9:5e:4f: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CC:4C:A7:02:8F:68:9C:48:71:92:70:36:39:A7:31:4D:F5:83:AE X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ae:53:d1:7f:60:c0:32:a5:71:bc:c2:3d:27:50:97:ac:19: 47:4f:31:ba:86:5b:f5:1b:19:d3:11:ce:60:f5:89:6b:02:bf: ab:7f:ba:1e:45:55:45:63:12:fb:fc:9c:00:fe:42:0c:47:28: 1f:d9:46:0e:55:37:7c:03:28:df:1f:c4:3c:e5:fe:36:af:e5: ef:b8:a1:f0:06:27:33:3f:0a:6b:84:fd:a2:a2:e9:7e:9a:5c: 3b:b2:10:7e:77:3e:17:6c:03:59:f7:c5:66:f3:d1:30:aa:b2: c9:ed:33:23:9e:32:d8:12:59:6b:35:c7:99:11:48:d1:0f:98: f9:36:ed:19:aa:4c:89:20:46:9c:4a:37:9c:fa:8f:86:cb:67: b7:49:7e:de:4d:7f:ff:0d:33:4a:29:c1:cb:ad:ae:1f:93:11: 49:39:fe:36:68:ff:c8:bb:cf:0a:59:21:1e:14:be:d6:7b:66: 35:ad:5d:38:ea:d2:e8:26:58:c4:0f:87:0b:c8:07:82:94:d6: d4:e8:3e:52:d3:a4:5e:e8:ff:2d:40:6f:7d:e7:d5:5f:01:ed: a9:e5:13:03:60:10:fd:3d:94:69:ec:a8:18:c4:71:d9:6a:fe: d0:2d:0e:6b:06:e1:1d:35:14:68:ce:70:b6:d8:3d:a8:87:49: c5:8b:2e:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYwOTIwMTUzNTMxWhcNMjYwOTI3MTUzNTMxWjAYMRYwFAYD VQQDEw02YWFmZmQ0My1iZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpWBC7FRZpNnsUzbLGSO95hu1L+dn0llvaxp7Lm8tZ3aCuaxhlMs6F+J2Iez l/czYEOmGPJ8moLRwvKJTUa3ttW+GNVw4FLiE/BUCsTOOWlYQgMXVtliITeNRMLP i4DMb2DzruJzn/bUiPsngGNAYq9X6IR7++7ZK2drHxKW2hldcDwSaZYQZxDmqr2Z HW0/b3rI1AoDXQ0iyGqo2ySxPzrXa5mevsFwAiinKjzh3cd4EGOkhG1UcO+/vy65 /Y1NOGtodB+wIbBK5NdzuC5WVzbCB15NweV5jbYamMyq8olo7db2SKVoiJI0uCae d6bIEGg61XFQmn9/dmXpXk97uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnMTKcC j2icSHGScDY5pzFN9YOuMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhq5T0X9gwDKlcbzCPSdQl6wZR08xuoZb9RsZ0xHOYPWJawK/q3+6HkVVRWMS +/ycAP5CDEcoH9lGDlU3fAMo3x/EPOX+Nq/l77ih8AYnMz8Ka4T9oqLpfppcO7IQ fnc+F2wDWffFZvPRMKqyye0zI54y2BJZazXHmRFI0Q+Y+TbtGapMiSBGnEo3nPqP hstnt0l+3k1//w0zSinBy62uH5MRSTn+Nmj/yLvPClkhHhS+1ntmNa1dOOrS6CZY xA+HC8gHgpTW1Og+UtOkXuj/LUBvfefVXwHtqeUTA2AQ/T2UaeyoGMRx2Wr+0C0O awbhHTUUaM5wttg9qIdJxYsuow== -----END CERTIFICATE-----Generated at Sun Sep 20 19:27:56 2026 by rpki-client